Senior IAM Engineer

We are looking for a hybrid IAM Engineer and Integration Specialist who understands that identity is the foundation of business operations. In this role, you won't just manage logins; you will build the Integration/Orchestration Infrastructure that powers our most critical revenue cycles. As an IAM Engineer, you will play a critical role in securing our systems and data. You will have the opportunity to work with cutting-edge IAM technologies, collaborate with cross-functional teams, and influence the development of our IAM strategy. Your work will directly impact the security and efficiency of our operations.

Responsibilities

Identity Lifecycle Management: Design and maintain automated onboarding, offboarding, and departmental transfer processes across our ecosystem (WorkDay, Okta, Google Workspace, etc.); Integration & Orchestration: Build and optimize complex, multi-step automation flows; assist with maintaining and growing our iPaaS (Workato) environment, treating 'Integrations as a Product'; build resilient, scalable 'recipes' that move data across the enterprise while maintaining strict IAM governance utilizing Okta Workflows; Access Governance: Implement and enforce Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models; Security & Compliance: Manage SSO (SAML/OIDC) and MFA configurations; ensure all access remains compliant with SOC2/HIPAA/GDPR standards through regular access reviews and audit logging; Custom Tooling: Develop custom scripts (Python, Perl, Ruby, etc.) and API integrations to bridge gaps where out-of-the-box connectors are unavailable; Data & AI Infrastructure Support: Secure the 'Data Perimeter'; ensure that data scientists and AI models have the correct, least-privileged access to our Data Infrastructure (Data Lakes/Warehouses); manage the identity lifecycle for AI Agents and Service Accounts; Business Process Optimization: Collaborate with HR, Finance, Sales Ops and other teams to identify bottlenecks in the lead-to-revenue lifecycle and solve them through identity-driven automation; Collaborate with cross-functional teams; Improve provisioning/deprovisioning processes; Integrate and manage IdPs within the IAM system; Handle and streamline access requests; Develop and implement IAM policies and procedures; Respond to ad-hoc requests

Requirements

Scripting: Proficiency in Python, Ruby or other languages for automating repetitive tasks and handling large-scale data imports/exports; Automation Mindset: Leveraging technology with a proven ability to build event-driven flows, use custom API connectors, and handle error logic; APIs: Comfortable working with RESTful APIs, JSON, and Webhooks; Infrastructure as Code: Experience using Terraform or Github to manage identity providers; Security Mindset: Understanding of Zero Trust architecture and Privileged Access Management (PAM) tools like CyberArk, BeyondTrust, etc.; 5–8+ years of experience in Identity and Access Management, including significant hands-on expertise with Okta (including OIE & OIG); Strong understanding of identity lifecycle management, directory services, SSO, MFA, SCIM provisioning, and federation (SAML, OIDC, OAuth); Proven experience partnering with HR, Finance, Compliance, and other cross-functional teams to design and implement IAM & Enterprise solutions; Demonstrated ability to streamline and automate processes using automation; Experience with auditing, governance, and access certification processes; Excellent problem-solving, communication, and stakeholder management skills

Nice to have

Experience with Workato or similar Integration Orchestrator tools such as Zapier, Snaplogic or Merge; Experience with Okta Workflows; Certifications: Workato or Okta Certified Professional/Administrator/Consultant; Experience integrating IAM with HR systems (e.g., Workday); Knowledge of compliance requirements related to IAM; Background in cloud platforms (AWS, GCP, Azure) and IAM integrations; Experience with IAM tools such as Auth0, or Azure AD

Benefits

Comprehensive health, dental, and vision insurance; Flexible time off and holidays; 401(k) with company match; Disability insurance and life insurance; Leaves of absence; Performance-based bonuses; Equity awards